ThreatCluster

CVE-2025-21948 and CVE-2024-43913 Published by Microsoft

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 46

Article Content

Browse articles
ThreatCluster

Microsoft published information on two vulnerabilities: CVE-2025-21948, a potential NULL dereference issue in HID, and CVE-2024-43913, related to device reference counting in nvme. Both vulnerabilities are critical for affected systems and require immediate attention from users and administrators.

Timeline

2024-08-26
CVE-2024-43913 published
2025-04-01
CVE-2025-21948 published
2026-02-18
Information published on CVE-2025-21948 and CVE-2024-43913